This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer File: VGWtK05zj1QvoOaBOPNiZkQeKaA.cer (raw, json) Hash identifier: LYyHwfSYzbmxChFhH3CO+01dBDKW40wy4oZUoIjSYYQ= Subject key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C131E3DA5EF1D7DBADEC12C9173C485 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57722 IP: 185.248.172.0/22 IP: 2a07:b200::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1e:3d:a5:ef:1d:7d:ba:de:c1:2c:91:73:c4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:26:1e:22:14:be:52:51:4b:f0:94:43:78:9f: 7a:76:37:90:9b:eb:7d:59:5c:09:68:c0:3e:fb:3f: 2c:24:b7:3b:cb:4a:5f:c6:ed:93:7c:3c:38:c6:5e: f8:22:38:91:b7:f6:e2:21:52:3c:2d:0c:dd:32:b9: 62:46:5b:d6:e4:ff:2c:96:ca:fb:76:d5:e7:15:33: 95:85:bd:2b:bc:7c:73:45:2c:19:94:eb:98:27:aa: 15:a1:7b:03:95:59:cc:c1:bf:c7:07:a1:5a:d6:d1: 12:d5:78:78:e5:ef:3e:e5:b3:dd:18:85:bc:4c:d7: 7e:aa:2d:87:0f:29:5f:ad:05:fd:12:82:f8:b4:75: 6e:80:97:c2:81:8e:65:5f:65:f6:db:67:1c:4f:e4: e0:15:3c:1f:37:04:fd:7c:39:a8:b3:93:d8:75:a9: c9:6a:a9:42:ce:60:a3:96:0a:39:ef:8a:60:c8:81: 87:37:c7:9b:ee:3c:c2:19:36:e5:b1:ad:12:b2:65: d9:58:9e:37:07:2d:05:c7:c4:b4:9a:f4:37:fd:cd: e0:cc:e6:fb:32:3b:2e:07:3f:b5:ee:e9:e3:d7:c5: 7c:cd:4e:03:f4:c6:b1:35:42:3c:cf:c1:82:3a:ae: b2:60:b0:66:5b:f5:c7:3c:6b:39:51:28:18:58:c4: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.172.0/22 IPv6: 2a07:b200::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57722 Signature Algorithm: sha256WithRSAEncryption 13:39:c7:5e:23:b4:ec:98:71:04:49:37:e8:3f:ad:4c:8e:53: ee:af:c0:c2:fe:65:5f:a9:3d:21:85:c9:3c:ac:fb:fc:8c:aa: 67:10:c1:63:33:9e:04:fd:ed:28:bb:64:c6:bf:40:fb:84:6d: 0d:0f:c7:c3:ab:7e:e4:4b:ba:20:97:5f:56:71:d8:45:01:37: 43:ea:e4:e9:6d:30:f0:da:45:1d:51:db:86:89:99:7d:3a:4c: 50:d0:8f:5b:2f:fb:47:4f:de:9b:e7:3d:aa:4d:66:74:b7:5b: cb:17:4f:59:24:c7:83:11:80:9e:4f:70:9d:b0:54:37:e0:32: 76:93:34:f0:fb:7d:33:05:e7:e2:d4:09:ec:2e:0c:98:fd:43: 78:d8:97:02:b1:b5:e7:ef:c3:36:f2:69:17:41:b1:bc:1d:05: 76:b3:06:14:7d:7c:1a:92:44:2d:f5:db:3e:c4:1c:92:20:8c: d1:7c:76:6a:78:2d:91:96:32:fa:91:ff:98:59:8f:ae:e4:41: 5f:c2:81:3e:81:ef:9a:20:12:3e:34:98:97:da:7d:e7:03:7b: b2:6d:5e:bf:bf:ce:28:ef:30:bf:b5:78:4c:22:18:23:c4:10: 62:db:28:de:23:ad:3e:ae:d3:a3:e8:5c:df:f0:8b:f1:e8:14: 3b:a5:86:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Ex49pe8dfbrewSyRc8SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDY1YWQyYjRlNzM4ZjU0MmZhMGU2ODEzOGYzNjI2NjQ0MWUyOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SYeIhS+UlFL8JRDeJ96djeQm+t9 WVwJaMA++z8sJLc7y0pfxu2TfDw4xl74IjiRt/biIVI8LQzdMrliRlvW5P8slsr7 dtXnFTOVhb0rvHxzRSwZlOuYJ6oVoXsDlVnMwb/HB6Fa1tES1Xh45e8+5bPdGIW8 TNd+qi2HDylfrQX9EoL4tHVugJfCgY5lX2X222ccT+TgFTwfNwT9fDmos5PYdanJ aqlCzmCjlgo574pgyIGHN8eb7jzCGTblsa0SsmXZWJ43By0Fx8S0mvQ3/c3gzOb7 MjsuBz+17unj18V8zU4D9MaxNUI8z8GCOq6yYLBmW/XHPGs5USgYWMT9gQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFRlrStOc49UL6DmgTjzYmZEHimgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzM2MjNl NS0zNDJlLTRjOWYtOTE4My0wZDNhZDM2ZWIxNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMzYyM2U1 LTM0MmUtNGM5Zi05MTgzLTBkM2FkMzZlYjE2MS8xL1ZHV3RLMDV6ajFRdm9PYUJP UE5pWmtRZUthQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufisMA0EAgACMAcDBQEqB7IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDhejANBgkqhkiG9w0BAQsFAAOCAQEAEznHXiO07Jhx BEk36D+tTI5T7q/Awv5lX6k9IYXJPKz7/IyqZxDBYzOeBP3tKLtkxr9A+4RtDQ/H w6t+5Eu6IJdfVnHYRQE3Q+rk6W0w8NpFHVHbhomZfTpMUNCPWy/7R0/em+c9qk1m dLdbyxdPWSTHgxGAnk9wnbBUN+AydpM08Pt9MwXn4tQJ7C4MmP1DeNiXArG15+/D NvJpF0GxvB0FdrMGFH18GpJELfXbPsQckiCM0Xx2angtkZYy+pH/mFmPruRBX8KB PoHvmiASPjSYl9p95wN7sm1ev7/OKO8wv7V4TCIYI8QQYtso3iOtPq7To+hc3/CL 8egUO6WGSg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:55 2026 by rpki-client